b1796d575449cf692ea1aba3cdd3481531a9931f1c5ae044b9613b1a7fc42b94

Sharing

Copy URL Twitter E-mail

General

Target

b1796d575449cf692ea1aba3cdd3481531a9931f1c5ae044b9613b1a7fc42b94
Size

103KB
MD5

3a7a3a6f4939739ceb8994efac540c2f
SHA1

ea5360c849dd341e180663bc1f229345adcd8f46
SHA256

b1796d575449cf692ea1aba3cdd3481531a9931f1c5ae044b9613b1a7fc42b94
SHA512

7fd2d1a4e5d38292735cbfd430b62551cb099ec69c87651ff12083946922efda9ede3779c3d4ff38873a6cd1342280442e46f6c04890f0be63e7ca497f4e9227
SSDEEP

1536:m3eP47Qxwf2GjG/t9fL1r77opkt2AuTbpLQLaLGpaTUyf8rXSBk:oa4Exw+GjG19fp7Rt2x/qmGpGUyfESB

Score

N/A

Malware Config

Signatures

Files

b1796d575449cf692ea1aba3cdd3481531a9931f1c5ae044b9613b1a7fc42b94
.dll windows x86

fceb506ae5dde58b16b30762234f03bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
ExitProcess
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
IsValidCodePage
GetModuleFileNameA
GetCPInfo
WriteFile
HeapAlloc
HeapFree
LoadLibraryA
GetModuleHandleExW
GetLogicalDriveStringsW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetProcessHeap
FormatMessageW
LocalFree
HeapSize
SetUnhandledExceptionFilter
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
LeaveCriticalSection
SetEvent
CloseHandle
GetOverlappedResult
DeviceIoControl
CreateEventA
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
GetVersionExW
InterlockedDecrement
InterlockedIncrement
FreeLibrary
CreateEventW
GetModuleHandleW
GetCurrentThreadId
GetTickCount
CreateThread
lstrlenW
UnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetProcAddress
WideCharToMultiByte
DisableThreadLibraryCalls
MultiByteToWideChar
GetLastError
GetStartupInfoA
GlobalFree
GetCommandLineA
GlobalAlloc
EnterCriticalSection
VirtualProtect

user32

LoadStringW
CreateWindowExW
RegisterClassExW
PostMessageW
GetDlgItem
SetCursor
LoadCursorW
GetWindowTextLengthW
EnableWindow
SetWindowTextW
GetSystemMetrics
InvalidateRect
GetClientRect
SendDlgItemMessageW
CallWindowProcW
SetWindowLongW
MessageBeep
GetWindowTextW
GetWindowLongW
GetParent
ShowWindow
SetFocus
SendMessageW

advapi32

RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegOpenKeyExW
RegCloseKey

gdi32

DeleteObject
CreateFontW

ole32

StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
IIDFromString

msvcr71

_onexit
free
_amsg_exit
memset
wcschr
memmove
_except_handler3
_vsnwprintf
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_XcptFilter

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fceb506ae5dde58b16b30762234f03bd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcr71

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 36KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 36KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 2KB - Virtual size: 2KB